title

RFC 5746 - Transport Layer Security (TLS) Renegotiation Indication Extension

charset

utf-8

X-UA-Compatible

IE=edge

viewport

width=device-width, initial-scale=1

description

Transport Layer Security (TLS) Renegotiation Indication Extension (RFC 5746, )

og:title

RFC 5746: Transport Layer Security (TLS) Renegotiation Indication Extension

og:url

https://datatracker.ietf.org/doc/html/rfc5746

og:site_name

IETF Datatracker

og:description

Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as the subsequent client data. This specification defines a TLS extension to cryptographically tie renegotiations to the TLS connections they are being performed over, thus preventing this attack. [STANDARDS-TRACK]

og:type

article

twitter:card

summary_large_image

alternate

/feed/document-changes/rfc5746/

apple-touch-icon

https://static.ietf.org/dt/12.24.0/ietf/images/ietf-logo-nor-180.png

canonical

https://datatracker.ietf.org/doc/html/rfc5746

icon

https://static.ietf.org/dt/12.24.0/ietf/images/ietf-logo-nor-32.png

icon

https://static.ietf.org/dt/12.24.0/ietf/images/ietf-logo-nor-16.png